Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df581f4d-9216-347c-9301-b0a5605ec4f3.roa
File:                     df581f4d-9216-347c-9301-b0a5605ec4f3.roa (raw, json)
Hash identifier:          fouAQ1tRwJ0SXv4OqsYp1CTH5CIBJodRR9V7pZvsY/4=
Subject key identifier:   28:1A:83:98:01:25:DE:79:AE:BA:45:23:1D:90:A3:69:11:6D:71:39
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584495FDC7B3E569C795F8953380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df581f4d-9216-347c-9301-b0a5605ec4f3.roa
Signing time:             Tue 16 Jan 2024 12:00:00 +0000
ROA not before:           Tue 16 Jan 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:95:fd:c7:b3:e5:69:c7:95:f8:95:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 16 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=baf18120-9c12-423b-ac0d-f6f71e2828d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:8e:65:25:9a:9b:5f:fa:3f:41:75:f0:c2:
                    2f:f2:4a:d0:1b:27:63:f7:de:3a:19:ce:84:b0:25:
                    58:24:1b:59:c9:34:97:78:dc:ab:1e:7a:56:ea:c9:
                    66:3c:f3:41:e0:25:b4:c9:22:8b:bc:ca:86:70:a1:
                    e7:d5:71:ad:a0:31:57:df:e9:db:e0:58:d6:02:b3:
                    50:33:9b:c8:6b:72:75:45:57:1b:e4:f6:6b:0c:08:
                    b5:14:c9:60:74:83:35:cd:bc:0c:4c:9f:6d:51:16:
                    9c:5f:8d:8b:a5:8a:ce:6c:16:e0:15:f6:72:61:5d:
                    9f:9b:dd:6d:70:5d:15:40:b5:d3:5f:12:57:04:33:
                    a2:9e:a3:2a:8a:80:62:16:a3:7f:1a:d7:db:0c:3f:
                    db:ca:f8:0a:7b:43:d8:98:a0:8c:7d:57:a1:6d:c4:
                    5f:fb:f4:5c:9e:f7:9d:b3:11:0b:17:2a:58:a1:45:
                    63:1a:8b:35:ce:18:31:ec:54:be:7a:17:14:cf:d6:
                    b6:70:f6:ad:9c:b0:92:d2:7f:c0:7f:d8:3e:22:c3:
                    d2:51:18:e0:bd:ab:f1:21:72:54:9f:83:96:bf:d2:
                    1f:be:99:b6:50:e6:d1:81:1d:cb:17:4c:95:6a:d8:
                    b2:f2:df:a6:8c:06:ba:65:a3:71:66:0e:17:99:a5:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1A:83:98:01:25:DE:79:AE:BA:45:23:1D:90:A3:69:11:6D:71:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df581f4d-9216-347c-9301-b0a5605ec4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:f2:05:fe:29:ad:7e:e9:e4:dd:aa:8c:c8:e9:0e:f6:e8:
         7e:1c:e7:33:07:cb:02:41:37:96:a5:3b:64:31:14:65:65:c7:
         c7:d9:fe:59:4b:cc:3d:0d:7d:de:d3:02:6e:83:82:0c:d3:af:
         8f:9d:4d:4b:0c:a1:a8:35:28:00:b9:b6:62:4f:6b:54:7b:77:
         5f:06:f2:08:36:8c:1b:34:fa:36:de:91:5c:c0:69:22:bd:6b:
         c7:0a:15:0d:a6:d3:97:25:23:ab:26:31:0c:1c:f0:fd:b4:67:
         ce:0d:e9:c7:aa:15:97:2d:4b:50:a5:f8:19:55:1b:af:b9:93:
         b2:33:55:1f:c2:09:63:20:c8:69:f3:71:16:ca:72:3d:b9:a7:
         0b:92:51:3c:73:0d:69:86:04:9e:f8:ec:14:dc:30:3e:be:c2:
         d9:0d:38:09:66:b9:66:64:d3:39:ac:b0:48:c8:1f:cb:89:3c:
         c8:b2:47:0b:68:6c:8e:50:9a:6e:5d:aa:88:76:0b:a1:83:3a:
         be:41:7b:8b:a2:43:ef:5d:45:b4:64:8e:6f:bc:4e:1d:34:27:
         9c:a7:e8:38:42:58:82:bf:b1:e6:9f:26:14:8c:fb:bd:6f:4d:
         4a:91:5a:32:2c:1a:8d:42:bc:3a:e5:c0:42:b9:0a:31:9c:65:
         d9:aa:95:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESV/cez5WnHlfiVM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDExNjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YmFmMTgxMjAtOWMxMi00MjNiLWFjMGQtZjZmNzFlMjgyOGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ6OZSWam1/6P0F18MIv8krQGydj9946Gc6E
sCVYJBtZyTSXeNyrHnpW6slmPPNB4CW0ySKLvMqGcKHn1XGtoDFX3+nb4FjWArNQ
M5vIa3J1RVcb5PZrDAi1FMlgdIM1zbwMTJ9tURacX42LpYrObBbgFfZyYV2fm91t
cF0VQLXTXxJXBDOinqMqioBiFqN/GtfbDD/byvgKe0PYmKCMfVehbcRf+/Rcnved
sxELFypYoUVjGos1zhgx7FS+ehcUz9a2cPatnLCS0n/Af9g+IsPSURjgvavxIXJU
n4OWv9Ifvpm2UObRgR3LF0yVatiy8t+mjAa6ZaNxZg4XmaVkqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgag5gBJd55rrpFIx2Qo2kRbXE5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGY1ODFmNGQtOTIxNi0z
NDdjLTkzMDEtYjBhNTYwNWVjNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7N8gX+Ka1+6eTdqozI6Q726H4c5zMHywJBN5alO2QxFGVlx8fZ/llL
zD0Nfd7TAm6DggzTr4+dTUsMoag1KAC5tmJPa1R7d18G8gg2jBs0+jbekVzAaSK9
a8cKFQ2m05clI6smMQwc8P20Z84N6ceqFZctS1Cl+BlVG6+5k7IzVR/CCWMgyGnz
cRbKcj25pwuSUTxzDWmGBJ747BTcMD6+wtkNOAlmuWZk0zmssEjIH8uJPMiyRwto
bI5Qmm5dqoh2C6GDOr5Be4uiQ+9dRbRkjm+8Th00J5yn6DhCWIK/seafJhSM+71v
TUqRWjIsGo1CvDrlwEK5CjGcZdmqlSw=
-----END CERTIFICATE-----